Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
File:                     f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa (raw, json)
Hash identifier:          nyFpM89xNxUbr/dQOR3PfQy94rteRhISkAmeCLSe43k=
Subject key identifier:   F1:AC:36:D9:1C:2A:02:5F:7D:7C:BA:A1:2B:47:0D:77:6B:B0:52:F2
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584F15CCEFFA6DA7181986884780
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     397994
IP address blocks:        2620:a0:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ef:fa:6d:a7:18:19:86:88:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=da412f1c-3ee9-4118-a634-edb3950e3930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:8f:62:54:0b:66:4f:e1:6f:e8:97:9d:8a:
                    18:01:7e:45:8f:f6:aa:ec:d5:d0:87:8f:ff:01:76:
                    05:1c:4a:bf:aa:65:b3:1e:d8:60:95:e9:09:26:6a:
                    41:7d:a7:7c:75:c6:79:f3:dc:2d:df:ba:0f:7a:d6:
                    2b:f9:f7:44:ed:97:5c:a8:43:9a:75:31:76:9c:29:
                    15:af:a6:03:0b:4b:c6:79:9c:8c:f9:bd:43:f3:55:
                    77:48:eb:c4:1f:b0:89:c1:44:1d:7c:f4:cb:8e:37:
                    4b:0f:a8:80:2c:3f:06:26:c6:84:8d:d7:b9:35:62:
                    39:bc:01:2e:f7:6d:59:92:da:26:0f:40:d1:2e:84:
                    2e:43:c0:f7:97:e3:c1:93:6f:df:02:62:e2:a1:c6:
                    bc:24:55:1d:25:f5:24:94:d4:eb:04:2e:9f:c5:93:
                    a3:e5:65:d8:1a:1a:70:33:ea:b2:98:40:0a:88:c2:
                    30:cd:eb:fa:65:97:b3:fb:5b:af:98:23:05:65:ce:
                    6f:2c:9b:b0:d2:e4:ce:12:73:35:37:52:6e:c8:d3:
                    bd:e9:31:1a:a4:9f:e9:91:cb:7e:0b:5a:32:19:02:
                    4e:dd:fd:e7:16:db:81:79:20:1e:3b:b9:be:de:62:
                    57:61:41:c9:22:e5:c1:59:16:ea:af:bd:d4:55:70:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:36:D9:1C:2A:02:5F:7D:7C:BA:A1:2B:47:0D:77:6B:B0:52:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:18:57:78:5d:af:68:3f:c7:7e:23:28:86:51:93:ed:49:
         28:87:77:6d:3c:f5:6b:fe:12:42:26:22:2d:dd:e8:d7:c3:a1:
         ef:7b:a7:7a:e7:34:fa:31:ee:ad:96:84:40:f2:bc:e7:f5:7c:
         3e:93:24:03:7a:03:16:04:34:82:96:1a:81:8a:ec:48:16:de:
         d1:29:b4:2d:da:5c:f2:5e:0b:51:04:a7:8f:2a:1a:b8:2a:96:
         a7:5b:69:02:51:47:b2:e8:45:7e:bd:a1:73:5d:e9:02:eb:6d:
         a2:76:85:15:da:2b:3d:8b:5a:a8:bc:ac:62:54:4e:dd:78:e1:
         d5:fa:dc:ca:f6:90:91:cf:ff:f9:a1:c4:f6:de:ff:60:fc:85:
         e9:4c:02:46:8c:75:78:8c:71:2e:cc:96:c9:56:f4:43:af:b2:
         8b:0f:fd:2e:56:cb:83:d3:6c:72:34:c3:eb:ae:2a:6a:8c:3f:
         fa:fa:42:d7:3b:08:dc:7e:46:65:b8:c1:ad:15:48:37:1e:43:
         e2:ec:4b:1a:67:04:0c:5e:19:60:9c:e9:4b:57:61:fa:b5:ce:
         87:6e:ac:3f:83:d4:d0:0b:e7:54:28:de:85:0e:f3:cb:dd:3d:
         a0:d0:b4:9f:dd:85:2d:fe:c3:1d:6b:8b:96:54:2d:6e:1d:7a:
         3c:8b:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:31:01 2026 by rpki-client